安全扫描
OpenClaw
安全
high confidenceThe skill's code and instructions match its stated purpose (fetching public crypto prices from Binance); it requests only network access and no credentials, though it omits declaring the runtime dependency (ccxt/Python).
评估建议
This skill appears coherent and does what it says: it calls Binance via ccxt to return public ticker prices and does not request credentials. Before installing, ensure the agent environment has a compatible Python interpreter and the ccxt package (pip install ccxt) — the SKILL.md/manifest do not list this. Note the script's shebang points to a specific venv path which may not exist on your host; running in an isolated environment or verifying the code is recommended. Also confirm you are comfort...详细分析 ▾
ℹ 用途与能力
The skill claims to fetch realtime crypto prices from Binance via the ccxt library and the included agent.py does exactly that (fetch_ticker against SYMBOL/USDT). However, the registry metadata and SKILL.md do not declare the Python runtime or the ccxt dependency, so the manifest is incomplete even though the behavior is consistent with the stated purpose.
✓ 指令范围
SKILL.md limits actions to extracting a symbol and running agent.py; the script only performs a public API call to Binance and returns a formatted price. It does not read local files, environment variables, or send data to unexpected endpoints.
ℹ 安装机制
There is no install spec (instruction-only), which minimizes install-time risk. The included agent.py expects the ccxt Python package and a Python interpreter (shebang points to a specific venv path). Lack of an explicit dependency/install step may cause runtime failures but is not itself malicious.
✓ 凭证需求
The skill requests network access but no environment variables, credentials, or config paths. Using public ticker endpoints does not require API keys, so the requested permissions are proportionate.
✓ 持久化与权限
The skill is not always-enabled and uses normal autonomous invocation defaults. It doesn't request persistent system-wide changes or access to other skills' configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/17
● 无害
安装命令 点击复制
官方npx clawhub@latest install crypto-price-by-lpdawn
镜像加速npx clawhub@latest install crypto-price-by-lpdawn --registry https://cn.clawhub-mirror.com
技能文档
1. Description
当用户询问加密货币的实时价格时，使用此技能。它通过 ccxt 库从 Binance 交易所获取最新价格，支持 BTC、ETH 等常见币种。2. When to use
- 用户说：“比特币现在多少钱？”
- 用户说：“查一下 ETH 的价格”
- 用户说：“狗狗币 (DOGE) 实时行情”
- 用户说：“BTC 涨了多少？”
- 用户说：“SOL 现在的价格”
- 用户说：“莱特币 LTC 价格”
- 用户说：“用 crypto-price-by-lpdawn 查比特币”
- 用户说：“当前 BTC/USDT 价格”
- 用户说：“ETH 美元价格是多少？”
3. How to use
- 从用户提问中提取要查询的加密货币符号（如
BTC、ETH、DOGE）。如果用户未指定，默认查询BTC。 - 调用
agent.py脚本，将币种符号作为参数传入。 - 脚本返回格式化的价格信息，直接回复给用户。
4. Edge cases
- 如果用户提到的币种无法查询，脚本返回错误，AI 回复：“抱歉，无法查询到该币种的信息，请确认符号是否正确。”
- 如果交易所 API 不可用，AI 回复：“暂时无法连接到交易所，请稍后重试。”
- 如果用户没有给出币种，AI 询问：“您想查询哪个币种的价格？例如 BTC 或 ETH。”
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制